8b8e66d39c2aef111ec17621167dc32c20635e09080bb2340a76fb5a779a60da | Triage

Sharing

General

Target

72efb8ce495abcc5d0513eca8d5cd07a_JaffaCakes118
Size

19KB
Sample

240726-g9qvmsvena
MD5

72efb8ce495abcc5d0513eca8d5cd07a
SHA1

5a4653a620a54e229acdc9774e122d201292564c
SHA256

8b8e66d39c2aef111ec17621167dc32c20635e09080bb2340a76fb5a779a60da
SHA512

74259b52f6761413816e1755708bcde23e730e93f3c828aff68112632df1ddea927faa91927314485c78f5fe2f4b3c15ef7735900877e70fcdce9774fe6876a6
SSDEEP

192:rjBPHGypoknDzNDL8EwD1yxDhsC+FpYKkvyFWjcCDi:rjx5XJL8EqoxNZ+FpY/Kwjre

Score

10^/10

discovery evasion execution persistence privilege_escalation

Malware Config

Targets

- Target
  
  72efb8ce495abcc5d0513eca8d5cd07a_JaffaCakes118
- Size
  
  19KB
- MD5
  
  72efb8ce495abcc5d0513eca8d5cd07a
- SHA1
  
  5a4653a620a54e229acdc9774e122d201292564c
- SHA256
  
  8b8e66d39c2aef111ec17621167dc32c20635e09080bb2340a76fb5a779a60da
- SHA512
  
  74259b52f6761413816e1755708bcde23e730e93f3c828aff68112632df1ddea927faa91927314485c78f5fe2f4b3c15ef7735900877e70fcdce9774fe6876a6
- SSDEEP
  
  192:rjBPHGypoknDzNDL8EwD1yxDhsC+FpYKkvyFWjcCDi:rjx5XJL8EqoxNZ+FpY/Kwjre
Score

10^/10

discovery evasion execution persistence privilege_escalation
- Disables service(s)
  evasion execution
- Modifies Windows Firewall
  evasion
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Network Share Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionpersistenceprivilege_escalation

behavioral2

discoveryevasionexecutionpersistenceprivilege_escalation